Hi everyone,  New to Meraki and the community forum 😊.    We've been seeing this malware-cnc (MALWARE-CNC Win.Ransomware.Lockergoga binary download attempt) for a few weeks with the snort-rule Sid 1-4967. The MX Events show IDS Alert with the actions "blocked". When checking the source IP's they all appear to be affiliated with Microsoft. Events also transpired around the same time we pushed out Win 11 upgrades.    I was wondering if anyone else has been seeing these security events in their security center/affected by this and what actions were done to resolve this issue.    Any help greatly appreciated.    Sincerely,  Khesar ... View more